Prisma Finance Hacker Demands Conditions to Return Stolen Funds
In a recent development, the individual responsible for the $11.6 million breach on Prisma Finance has set out terms for giving back the funds. The hacker, claiming to be a white hat hacker, expressed dissatisfaction with the response time of the project’s team.
Hacker Outlines Demands for Prisma Finance Funds
On March 28, the decentralized finance (DeFi) protocol Prisma Finance disclosed a security breach that resulted in the loss of 3,257.57 wstETH, amounting to $11.6 million. Following the incident, the platform advised users to revoke delegate approvals and issued a detailed post-mortem audit to address the breach.
- The hacker exploited a vulnerability in both versions of Prisma Finance’s MigrateTroveZap contracts.
- Around 20 addresses continue to be impacted by the breach.
- The hacker demands an online press conference with full team disclosure, admission of past errors, revelation of the smart contract auditor, and plans for improved security.
Additionally, Prisma Finance must inform the community about contract deployment strategies and emergency response protocols. The hacker critiqued the terminology used in the post-mortem audit, challenging the characterization of the incident as an “exploit” or “attack.” He argued that all parties had agreed to the terms specified in the smart contract.
“You cannot agree something with others, and then judge it is wrong or it is true. No human rights. You should have been more careful before deploying your contract. I hope this would help people be more careful participating in defi, the teams would be more responsible, and everyone would change their minds about things like this,” the hacker stated.
The hacker denied any malicious intent and called for the retraction of accusatory language within 12 hours. Despite the demands to return the stolen funds, doubts linger within the crypto community regarding the hacker’s true intentions.
Questions Surrounding the Hacker’s White Hat Status
The hacker’s use of the OFAC-sanctioned crypto mixing tool Tornado Cash to obscure transactions has raised concerns within the community. Reports from the blockchain security firm Peckshield revealed suspicious movements of over 1,000 ETH by addresses connected to the hacker. Yet, the hacker insists on returning the pilfered funds.
“After [the online conference] happens, the amount I would keep, and the amount that I can send to you would be discussed (stay assured, most of it would be returned) and the notes would be sent to your email,” the hacker assured.
By
By
By
By